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Amendments to the Claims: 

Please amend the claims to read as follows: 

1 . (Canceled) 

2. (Currently amended) The method of claim-4- 41, wherein the filter is 
defined by matching criteria to identify identifies a particular network address 
in the range of network addresses and an action that is performed with respect 
to the particular network address. 

3. (Canceled) 

4. (Currently amended) The method of claim-4- 41 , further comprising 
modifying the instructions to change the range of addresses. 

5. (Previously Presented) The method of claim 4, wherein modifying the 
instructions comprises increasing the range of addresses. 

6. (Currently amended) The method of claim 4 41 , further comprising 
installing a negative filter in order to block a network device having an address 
within the range of addresses from accessing the resource. 

7. (Currently amended) The method of claim 4 41, wherein the instructions 
are installed in a target device on the network, and the resource comprises 
bandwidth available from the target device. 

8. (Previously presented) The method of claim 7, further comprising 
modifying the instructions to change an amount of bandwidth available on the 
target device. 
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9. (Currently amended) The method of claim 4_41 , wherein the filter defines 
a level of access to the resource based on a priority level of data packets being 
transmitted through the network. 

10. (Previously presented) The method of claim 9, further comprising 
modifying the instructions to change an amount of data packets having a 
particular priority level that can be transmitted through the network. 

1 1. (Original) The method of claim 9, wherein the priority level of the data 
packets is defined by instructions in headers of the data packets. 

12. (Previously presented) The method of claim 2, wherein there are a 
limited number of filters that can be installed on a target device on the 
network. 

13. (Previously presented) The method of claim 12, further comprising 
installing a negative filter on the target device in order to block data from an 
address that is transmitting data. 

14. (Canceled) 

15. (Currently amended) The computer program of claim 1 4 42 , wherein the 
filter is defined by matching criteria to identify identifies a particular network 
address in the range of network addresses and an action that is performed with 
respect to the particular network address. 

16. (Canceled) 

17. (Currently amended) The computer program of claim 4 4 42 , further 
comprising executable code to modify the instructions to change the range of 
network addresses. 
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18. (Currently amended) The computer program of claim 17, wherein 
modifying the instructions comprises increasing the range of network 
addresses. 

19. (Currently Amended) The computer program of claim 44 42 , further 
comprising executable code to install a negative filter in order to block a 
network device having an address within the range of network addresses from 
accessing the resource. 

20. (Currently amended) The computer program of claim 4 4 42 , wherein the 
instructions are installed in a target device on the network, and the resource 
comprises bandwidth available from the target device. 

21. (Previously presented) The computer program of claim 20, further 
comprising executable code to modify the instructions to change an amount of 
bandwidth available on the target device. 

22. (Currently amended) The computer program of claim 4 4 42 , wherein the 
filter defines a level of access to the resource based on a priority level of data 
packets being transmitted through the network. 

23. (Previously presented) The computer program of claim 22, further 
comprising executable code to modify the instructions to change an amount of 
data packets having a particular priority level that can be transmitted through 
the network. 

24. (Original) The computer program of claim 22, wherein the priority level 
of the data packets is defined by instructions in headers of the data packets. 
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25. (Previously presented) The computer program of claim 15, wherein there 
are a limited number of filters that can be installed on a target device on the 
network. 

26. (Previously presented) The computer program of claim 15, further 
comprising executable code to install a negative filter on the target device in 
order to block data from an address that is transmitting data. 

27. (Canceled) 

28. (Currently amended) The apparatus of claim 3743, wherein the filter is 
defined by matching criteria to identify identifies a particular network address 
in the range of network addresses and an action that is performed with respect 
to the particular network address. 

29. (Canceled) 

30. (Currently amended) The apparatus of claim 37_43, wherein the 
processor executes the code to modify the instructions to change the range of 
addresses 

31. (Previously presented) The apparatus of claim 30, wherein modifying the 
instructions comprises increasing the range of addresses. 

32. (Previously presented) The apparatus of claim 31, wherein the processor 
executes the code to install a negative filter in order to block a network device 
having an address within the range of addresses from accessing the resource. 

33. (Currently amended) The apparatus of claim 2? 43, wherein the 
instructions are installed in a target device on a network, and the resource 
comprises bandwidth available from the target device. 
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34. (Previously presented) The apparatus of claim 33, wherein the processor 
executes code to change an amount of bandwidth available on the target 
device. 

35. (Currently amended) The apparatus of claim £7 43, wherein the filter 
defines a level of access to the resource based on a priority level data packets 
being transmitted through the network. 

36. (Previously presented) The apparatus of claim 35, wherein the processor 
executes code to modify the instructions to change an amount of data packets 
having a particular priority level that can be transmitted through the network. 

37. (Original) The apparatus of claim 35, wherein the priority level of the 
data packets is defined by instructions in headers of the data packets. 

38. (Previously presented) The apparatus of claim 28, wherein there are a 
limited number of filters that can be installed on the network. 

39. (Previously presented) The apparatus of claim 38, wherein the processor 
executes code to install a negative filter on the device in order to block data 
from an address that is transmitting data. 

40. (Canceled) 

41. (New) A method of aggregating filters on a network device for providing 
access to a resource on a network, comprising: 

installing instructions on the network for implementing a filter 
having matching criteria that limit access to the resource to a first 
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network device based on a network address associated with the first 
network device; 

determining that a second network device requests access to the 
resource; 

identifying a range of network addresses based on the network 
addresses associated with the first and second network devices; and 

modifying the matching criteria of the filter such that the filter 
grants access to the resource to any network device associated with a 
network address within the identified range of network addresses. 

42. (New) A computer program stored on a computer-readable medium 

aggregating filters on a network device for providing access to a resource 
on a network, the computer program comprising executable code that 
causes a computer to: 

install instructions on the network for implementing a filter 

having matching criteria that limit access to the resource to a first 

network device based on a network address associated with the 

first network device; 

determine that a second network device requests access to 

the resource; 

identify a range of network addresses based on the network 
addresses associated with the first and second network devices; 
and 
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modify the matching criteria of the filter such that the filter 
grants access to the resource to any network device associated 
with a network address within the identified range of network 
addresses. 

43. (New) An apparatus for aggregating filters on a network device for 
providing access to resource on a network, comprising: 

a memory which stores executable code; and 
a processor which executes the code to: 

install instructions on the network for implementing a 
filter having matching criteria that limit access to the 
resource to a first network device based on a network 
address associated with the first network device; 

determine that a second network device requests 
access to the resource; 

identify a range of network addresses based on the 
network addresses associated with the first and second 
network devices; and 

modify the matching criteria of the filter such that the 
filter grants access to the resource to any network device 
associated with a network address within the identified 
range of network addresses. 

44. (New) An apparatus for aggregating filters on a network device for 
providing access to a resource on a network, comprising: 

means for installing instructions on the network for implementing 
a filter having matching criteria that limit access to the resource to a first 



Amendment and Response 
NOR-090 

U.S.S.N. 09/638,372 
Page 9 

network device based on a network address associated with the first 
network device; 

means for deteranining that a second network device requests 
access to the resource; 

means for identifying a range of network addresses based on the 
network addresses associated with the first and second network devices; 

means for modifying the matching criteria of the filter such that 
the filter grants access to the resource to any network device associated 
with a network address within the identified range of network addresses. 



